Safety Characteristics Treated as Ordinary SCs? —— Five Steps to Implement Product Safety Management in IATF 16949

1. Introduction: An Auditor's Question Silences the Meeting Room for Several Seconds

A certain automotive parts company supplies steering knuckle assemblies to vehicle manufacturers and has held an IATF 16949 certificate for eight years, with a complete set of system documents. During the annual surveillance audit, the auditor opened the control plan and pointed to a dimension marked "SC," asking the quality manager, "Is this a safety characteristic? If so, why is there no safety marking on the control plan? Where is your 100% verification plan? Please show me your list of safety characteristics."

The meeting room fell silent for several seconds. This dimension was the diameter of the steering knuckle's main pin. If it exceeded the tolerance, it could lead to steering failure during vehicle operation—its severity in the DFMEA was rated 10 (the highest level). However, it had long been managed as an ordinary SC: SPC monitoring plus final inspection sampling, without being separately identified as a safety characteristic. The audit team ultimately issued a nonconformity related to product safety, with a 60-day rectification deadline.

After the incident, the company conducted a comprehensive review and identified 23 safety characteristics from over 200 special characteristics, six of which had never been separately managed before, involving braking, steering, and suspension systems. The quality manager later remarked, "If the auditor hadn't asked that extra question, these characteristics might still be managed through ordinary SC sampling."

This is not an isolated case. According to statistics from multiple certification bodies, nonconformities related to product safety (clause 4.4.1.2) consistently rank high. Many companies are not uninterested in quality, but they fail to understand the significant difference in control requirements between safety characteristics and ordinary special characteristics. This article outlines a five-step method to clarify how to identify, communicate, and effectively manage safety characteristics.

2. Core Concepts: Why Product Safety is the "High-Voltage Line" in IATF 16949

1. What are Safety Characteristics?

Product safety refers to the characteristics of a product that ensure it does not cause personal injury or significant property damage during its intended use and any reasonably foreseeable misuse. In the automotive industry, systems directly related to personal safety, such as braking, steering, driving, restraint (seat belts and airbags), fuel, and high-voltage electricity, typically have their key functions and parameters classified as safety characteristics.

IATF 16949 clause 4.4.1.2 specifically requires organizations to establish documented processes for managing "product safety-related products and manufacturing processes." In summary, the standard sets out more than a dozen stringent requirements: identifying relevant regulatory requirements; identifying safety characteristics; marking safety-related failures in DFMEA and PFMEA; incorporating customer requirements into control plans and process flow diagrams, and setting safety approval and verification points; providing 100% verification or poka-yoke; defining reaction plans, containment, and escalation procedures for safety issues; establishing batch or serialized traceability; ensuring the competence and training of relevant personnel; pre-approving safety-related product and process changes (including temporary changes); and regularly testing emergency response plans (such as simulated recalls).

In short: ordinary characteristics manage "quality," while safety characteristics manage "human lives." The cost of quality issues is rework, claims, and lost orders; the cost of safety characteristic issues could be personal injury, vehicle recalls, legal liability, or even the survival of the company.

2. Differences in Control Between Safety Characteristics and Ordinary SCs

Many companies treat safety characteristics the same as SCs, primarily because they do not understand the fundamental differences in control logic between the two. The following table compares the two:

3. Relationship with Functional Safety (ISO 26262)

It is important to note that product safety (IATF 16949 clause 4.4.1.2) and functional safety (ISO 26262) are not the same. The former covers all safety-related products and manufacturing processes, emphasizing the identification and manufacturing control of safety characteristics. The latter focuses on systematic failures in electronic and electrical systems, emphasizing the safety lifecycle and safety levels (ASIL). While the concepts are related, they target different aspects. This article focuses on the former, which is the area where ordinary mechanical parts companies are most often "caught" during audits.

3. Practical Methods: Five Steps to Implement Product Safety Management

Step One: Build a List — Identify Safety Characteristics from SCs

The first step in managing safety characteristics is to create a controlled list that clearly identifies which characteristics are safety characteristics. The identification inputs should come from at least four sources:

• Regulatory Requirements: Characteristics mentioned in mandatory regulations for the product market (such as braking, lighting, and emission regulations);
• Customer Designation: Special symbols on drawings, technical agreements, and customer-specific requirements (CSR) that clearly list safety components;
• Risk Analysis: Product characteristics and process parameters corresponding to failure modes with severity 9-10 in the DFMEA;
• Historical Data: Characteristics exposed in past accidents, recall cases, and major claims.

The output is a "Product Safety Characteristics List," which should include at least: characteristic number, characteristic name, drawing location, regulatory or customer basis, failure consequence description, involved process, and responsible person. The list must be controlled and reviewed at least annually, with immediate reviews triggered by design changes or regulatory updates. The company mentioned earlier used these four sources to cross-check and identify 23 safety characteristics from over 200 SCs.

Step Two: Transmit Markings — Ensure Safety Characteristics Are "Highlighted Throughout"

Identifying safety characteristics is just the beginning; the critical step is to ensure that the safety attribute is transmitted from the design stage to the manufacturing stage:

• DFMEA and PFMEA: Mark safety-related failure modes with a safety symbol (e.g., S) to ensure they are not lost in subsequent analyses;
• Control Plan: List safety characteristics separately and mark them, design control methods according to the safety level, and specify reaction plans and escalation paths for safety issues;
• Process Flow Diagram: Set safety approval and verification points (e.g., 100% inspection stations, poka-yoke verification stations) at key processes for safety characteristics;
• Work Instructions and Inspection Specifications: Synchronize the marking of safety symbols and train employees to recognize that "this process involves a safety component."

Many companies fail because of "broken links": the control plan is marked, but the work instructions are not; the drawings are marked, but the supplier end is not. Each link in the marking transmission must be signed off or recorded in the system. Missing any link means the safety attribute is "broken" at that point.

Step Three: Define Controls — 100% Verification or Poka-Yoke, with Statistical Control as Auxiliary

The control principle for safety characteristics is simple: do not rely on probability for release. The specific methods, in order of priority, are:

1. Prioritize Poka-Yoke: Use positioning pins, sensors, limit switches, interlocks, and automatic stops to make it impossible to "make a mistake" or to prevent mistakes from reaching the next process;
2. If Poka-Yoke is not possible, use 100% automatic inspection: online inspection equipment measures each piece, and data is linked to the product's serial number;
3. Statistical process control (SPC) is only used as an auxiliary means to ensure process stability and cannot be the basis for releasing safety characteristics;
4. Manual full inspection cannot be the sole verification method for safety characteristics—fatigue, distraction, and production pressure can lead to higher inspection error rates compared to equipment.

In one company, the air-tightness test process changed from "sampling 5 pieces per batch" to 100% online inspection with automatic stoppage for nonconforming products, reducing the inspection error rate from 0.8% to nearly zero, and making the inspection data of each product traceable. The investment was minimal, but the nature of the control was entirely different.

Step Four: Establish Traceability — Quickly Identify the Affected Scope in Case of Issues

The first action when a safety characteristic fails is containment, and the prerequisite for containment is knowing which batches are affected. Therefore, the traceability system must be designed specifically for safety characteristics:

• Marking: Finished products are marked by batch or serial number, and the inspection data, equipment parameters, and poka-yoke results of safety characteristics are linked to the batch;
• Drills: Regularly conduct simulated traceability exercises, randomly select a batch, and trace back to raw materials and process parameters, recording the time taken and setting targets (e.g., completing the identification within 2 hours);
• Emergency Response Plan: Clearly define containment actions, escalation paths, and decision-makers for safety issues, and conduct at least one drill per year (including simulated recalls), with the results included in management review.

During the first simulated traceability exercise, one company took 5.5 hours to identify three suspect batches from the serial number, far exceeding the internal target of 2 hours. The reason was that a batch of products used blanks from two different suppliers, and the markings were not detailed enough. After redesigning the marking rules and integrating data associations, the same exercise was completed in 1.5 hours. This difference is critical in a real recall scenario.

Step Five: Manage Changes — "Approve Before Execution" for Safety-Related Changes

Design changes, process changes, and even temporary changes (equipment substitution, temporary parameter adjustments, personnel substitutions) related to safety characteristics must be pre-approved and cannot be implemented without prior approval:

• Establish identification rules for safety-related changes: When the change object involves the safety characteristics list or safety-related processes, automatically escalate the approval level;
• Re-verify before implementing changes: Validate the process capability, the effectiveness of 100% verification methods, and the validity of the traceability plan after the change;
• Supplier Coordination: When safety characteristics are outsourced for processing, require suppliers to perform the same 100% verification, marking, and traceability, and include safety-related clauses in the quality agreement, subjecting them to regular audits and guidance.

4. Common Pitfalls: Seven Traps, Any One Can "Trigger a Crisis"

Pitfall One: Treating safety characteristics as all SCs. Managing all characteristics to the safety standard drastically increases costs and dilutes the focus on true priorities. Safety characteristics should be precisely identified based on regulations, customer designation, and severity, not over-identified.

Pitfall Two: Relying solely on DFMEA severity for identification. Severity 9-10 is an important input, but not the only one. Regulatory requirements, customer designation, and historical accident data are equally critical. Missing any source could result in overlooking a safety characteristic.

Pitfall Three: Using "manual full inspection" as 100% verification. Manual full inspection is not poka-yoke; fatigue, distraction, and production pressure can cause inspection errors. 100% verification for safety characteristics must be equipment-based, automated, or achieved through poka-yoke devices.

Pitfall Four: Marking only up to the control plan. If the control plan is marked but the work instructions, inspection specifications, and supplier end are not, it is as good as not marking at all. Markings must be transmitted to the operators to be truly effective.

Pitfall Five: Traceability only to "batch number." After unpacking, mixing batches, and cross-line flow, a batch number alone cannot accurately identify the true scope. Safety characteristics should be marked by the smallest controllable unit (serial number or detailed batch) and regularly verified through drills.

Pitfall Six: Emergency response plans are "paper documents." If they are not practiced, the upgrade path will be chaotic, and the response will be delayed when real issues arise. Records of simulated recall drills are one of the items auditors will check.

Pitfall Seven: Safety-related changes follow ordinary procedures. Temporary changes are the most likely to trigger issues—replacing a broken machine, temporarily adjusting parameters, and thinking "it's just for a few days, no problem"—are high-risk windows for losing control of safety characteristics. Safety-related temporary changes also require pre-approval and post-verification.

5. One-Sentence Summary

Product safety is a red-line clause in IATF 16949: safety characteristics must be separately identified, marked throughout, 100% verified or poka-yoked, traceable, and changes must be pre-approved—any missing element can turn a routine audit into a crisis. Quality managers are advised to take one action this week: review the control plan and ask, "Which of these are safety characteristics?" If the answer is unclear, start by building a list.

Safety characteristics must be poka-yoked and 100% verified, traceable, and changes pre-approved.

Knowledge code: 2.1.2

Version: v20260820

Author: Quality Think Tank

Quality Think Tank is dedicated to providing systematic professional knowledge, methodologies, and practical tools for quality management practitioners, helping companies continuously improve their quality capabilities.